Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39352e302f32342d3234203d3e203437353533.roa
File:                     3134322e3134372e39352e302f32342d3234203d3e203437353533.roa (raw, json)
Hash identifier:          rrISbsCtEnimnofMMvgGj0FxtsaUbnOC5+KJRQbLfHk=
Subject key identifier:   13:A3:E3:DA:A7:5D:17:39:78:BD:7B:75:CA:B3:CA:FC:16:8E:5E:7F
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       727C1B5B248C01795FCBF05905C5A256CF40854C
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39352e302f32342d3234203d3e203437353533.roa
Signing time:             Wed 31 Jul 2024 15:38:37 +0000
ROA not before:           Wed 31 Jul 2024 15:33:37 +0000
ROA not after:            Wed 30 Jul 2025 15:38:37 +0000
asID:                     47553
IP address blocks:        142.147.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7c:1b:5b:24:8c:01:79:5f:cb:f0:59:05:c5:a2:56:cf:40:85:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Jul 31 15:33:37 2024 GMT
            Not After : Jul 30 15:38:37 2025 GMT
        Subject: CN=13A3E3DAA75D173978BD7B75CAB3CAFC168E5E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:d8:6e:74:50:fc:1a:29:30:72:aa:bf:97:
                    35:38:e0:f3:ff:ec:a5:63:d1:d0:29:06:5c:ce:d9:
                    40:a8:9b:63:78:bb:d6:5c:0a:97:c8:8d:27:a7:48:
                    5d:97:f7:df:0e:1f:74:35:52:19:a3:da:85:ec:c3:
                    54:37:74:14:08:db:07:cb:66:bc:85:97:4a:c5:1d:
                    38:be:e8:64:99:49:77:de:d3:de:d5:86:44:07:59:
                    9e:0b:23:73:ba:cd:a3:64:bd:be:c6:91:a7:31:e9:
                    8e:5c:e3:a3:78:06:12:52:32:6e:cb:36:95:9b:51:
                    34:9a:50:88:07:e5:e8:5a:63:b1:d5:62:68:23:2a:
                    24:a6:cd:21:d0:57:d8:55:63:c7:f1:ee:a5:fa:0d:
                    8f:5f:1e:8b:ad:57:88:40:e7:e7:e5:d5:af:b7:9d:
                    e3:af:26:3d:c8:6f:fc:78:1a:5a:af:2b:9c:86:0a:
                    16:5a:0b:bb:f8:5a:56:95:e4:aa:e0:a2:44:23:81:
                    6e:1b:13:68:d2:6c:2d:4a:f5:27:af:63:80:75:84:
                    5c:6e:ab:8b:03:0e:d3:ff:70:88:5c:cc:c1:05:7d:
                    62:9b:63:f1:dd:8d:7d:36:b8:82:24:ad:09:fb:81:
                    c2:10:cc:ad:cc:73:60:a3:fb:a9:41:9e:4e:6b:a8:
                    06:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A3:E3:DA:A7:5D:17:39:78:BD:7B:75:CA:B3:CA:FC:16:8E:5E:7F
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39352e302f32342d3234203d3e203437353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:35:7a:f4:02:7b:27:50:ee:7d:04:4c:83:2a:84:7a:88:36:
         01:e3:fb:bc:74:24:98:f2:10:53:d0:a2:45:ef:35:4a:45:8c:
         20:ec:0c:52:6f:c4:0f:0c:2d:2c:94:bb:75:29:aa:4a:5d:81:
         29:ec:9b:70:f2:8e:db:eb:dd:30:a0:c0:c3:50:e5:f9:f6:52:
         32:e9:59:8d:92:71:48:b6:67:43:27:42:f8:cb:65:54:47:69:
         8b:18:01:bf:ed:a1:40:16:f2:9a:fb:68:8d:e3:93:21:af:cb:
         e1:da:f4:a4:b3:b9:87:10:6d:03:ff:3f:27:2f:a5:f6:4f:78:
         bc:3d:4f:ef:09:46:35:9a:e0:3b:0d:d9:00:99:c6:4d:4f:6a:
         89:11:d8:1c:f5:f6:85:1f:cc:89:8a:5a:4e:ff:7e:ee:ca:de:
         ed:a5:55:8c:58:89:c8:96:e2:4b:39:80:3f:9c:66:cb:c8:da:
         df:57:ca:75:f5:cd:ef:aa:78:8b:8b:5f:e0:8d:31:70:dc:ac:
         01:a2:92:04:ea:e5:80:52:b5:05:1f:c7:4d:2d:d4:2c:ed:f2:
         ad:c5:07:70:e6:ba:68:d4:77:75:93:52:4c:30:d8:55:d6:18:
         cb:64:7e:39:d5:76:34:68:09:05:bb:a7:a1:12:cf:e8:ba:bd:
         e4:92:67:87
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUcnwbWySMAXlfy/BZBcWiVs9AhUwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk
MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjQwNzMxMTUzMzM3WhcNMjUwNzMwMTUzODM3
WjAzMTEwLwYDVQQDEygxM0EzRTNEQUE3NUQxNzM5NzhCRDdCNzVDQUIzQ0FGQzE2
OEU1RTdGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq7YbnRQ/Bop
MHKqv5c1OODz/+ylY9HQKQZcztlAqJtjeLvWXAqXyI0np0hdl/ffDh90NVIZo9qF
7MNUN3QUCNsHy2a8hZdKxR04vuhkmUl33tPe1YZEB1meCyNzus2jZL2+xpGnMemO
XOOjeAYSUjJuyzaVm1E0mlCIB+XoWmOx1WJoIyokps0h0FfYVWPH8e6l+g2PXx6L
rVeIQOfn5dWvt53jryY9yG/8eBparyuchgoWWgu7+FpWleSq4KJEI4FuGxNo0mwt
SvUnr2OAdYRcbquLAw7T/3CIXMzBBX1im2Px3Y19NriCJK0J+4HCEMytzHNgo/up
QZ5Oa6gGVwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBOj49qnXRc5eL17dcqzyvwW
jl5/MB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5
OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm
NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2
ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi
ODE0YzUyNC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzNDMyMmUzMTM0MzcyZTM5MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzUzNTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpNf
MA0GCSqGSIb3DQEBCwUAA4IBAQBINXr0AnsnUO59BEyDKoR6iDYB4/u8dCSY8hBT
0KJF7zVKRYwg7AxSb8QPDC0slLt1KapKXYEp7Jtw8o7b690woMDDUOX59lIy6VmN
knFItmdDJ0L4y2VUR2mLGAG/7aFAFvKa+2iN45Mhr8vh2vSks7mHEG0D/z8nL6X2
T3i8PU/vCUY1muA7DdkAmcZNT2qJEdgc9faFH8yJilpO/37uyt7tpVWMWInIluJL
OYA/nGbLyNrfV8p19c3vqniLi1/gjTFw3KwBopIE6uWAUrUFH8dNLdQs7fKtxQdw
5rpo1Hd1k1JMMNhV1hjLZH451XY0aAkFu6ehEs/our3kkmeH
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:23 2024 by rpki-client on console-ams.rpki-client.org